Skip to content

3.0.0

Choose a tag to compare

@theodorejb theodorejb released this 15 Oct 19:14
· 3 commits to master since this release

Added

  • ServiceProvider class, which creates SP metadata (getMetadataXml()), signed authentication requests (createAuthnRequest()), and signed logout responses (createLogoutResponse()) from one set of SP settings. This ensures the messages match what the metadata declares.

Changed

  • SP metadata now sets AuthnRequestsSigned="true" on the SP SSO descriptor, so IdPs can require that authentication requests are signed.

Removed

  • SamlUtils::createSpMetadata(). Use ServiceProvider::getMetadataXml() instead.